Vulnerabilities (CVE)

Filtered by NVD-CWE-Other
Total 29997 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2003-1099 1 Hp 1 Hp-ux 2026-06-16 2.1 LOW N/A
shar on HP-UX B.11.00, B.11.04, and B.11.11 creates temporary files with predictable names in /tmp, which allows local users to cause a denial of service and possibly execute arbitrary code via a symlink attack.
CVE-2003-1098 1 Hp 1 Hp-ux 2026-06-16 7.2 HIGH N/A
The Xserver for HP-UX 11.22 was not properly built, which introduced a vulnerability that allows local users to gain privileges.
CVE-2003-1097 1 Hp 1 Hp-ux 2026-06-16 7.2 HIGH N/A
Buffer overflow in rexec on HP-UX B.10.20, B.11.00, and B.11.04, when setuid root, may allow local users to gain privileges via a long -l option.
CVE-2003-1096 1 Cisco 1 Leap 2026-06-16 10.0 HIGH N/A
The Cisco LEAP challenge/response authentication mechanism uses passwords in a way that is susceptible to dictionary attacks, which makes it easier for remote attackers to gain privileges via brute force password guessing attacks.
CVE-2003-1095 1 Bea 1 Weblogic Server 2026-06-16 4.6 MEDIUM N/A
BEA WebLogic Server and Express 7.0 and 7.0.0.1, when using "memory" session persistence for web applications, does not clear authentication information when a web application is redeployed, which could allow users of that application to gain access without having to re-authenticate.
CVE-2003-1094 1 Bea 1 Weblogic Server 2026-06-16 7.2 HIGH N/A
BEA WebLogic Server and Express version 7.0 SP3 may follow certain code execution paths that result in an incorrect current user, such as in the frequent use of JNDI initial contexts, which could allow remote authenticated users to gain privileges.
CVE-2003-1093 1 Bea 1 Weblogic Server 2026-06-16 4.6 MEDIUM N/A
BEA WebLogic Server 6.1, 7.0 and 7.0.0.1, when routing messages to a JMS target domain that is inaccessible, may leak the user's password when it throws a ResourceAllocationException.
CVE-2003-1092 1 Christos Zoulas 1 File 1 2026-06-16 7.5 HIGH N/A
Unknown vulnerability in the "Automatic File Content Type Recognition (AFCTR) Tool version of the file package before 3.41, related to "a memory allocation problem," has unknown impact.
CVE-2003-1091 1 Apple 1 Quicktime Broadcaster 2026-06-16 7.5 HIGH N/A
Integer overflow in MP3Broadcaster for Apple QuickTime/Darwin Streaming Server 4.1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed ID3 tags in MP3 files.
CVE-2003-1090 1 Celestial Software 1 Absolutetelnet 2026-06-16 10.0 HIGH N/A
Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary code via a long window title.
CVE-2003-1089 1 Phpoutsourcing 1 Zorum 2026-06-16 5.0 MEDIUM N/A
index.php for Zorum 3.4 allows remote attackers to determine the full path of the web root via invalid parameter names, which reveals the path in a PHP error message.
CVE-2003-1088 1 Phpoutsourcing 1 Zorum 2026-06-16 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.4 and 3.5 allows remote attackers to inject arbitrary web script or HTML via the method parameter.
CVE-2003-1087 1 Hp 1 Hp-ux 2026-06-16 5.0 MEDIUM N/A
Unknown vulnerability in diagmond and possibly other applications in HP9000 Series 700/800 running HP-UX B.11.00, B.11.04, B.11.11, and B.11.22 allows remote attackers to cause a denial of service (program failure) via certain network traffic.
CVE-2003-1086 1 Pmachine 2 Pmachine Free, Pmachine Pro 2026-06-16 7.5 HIGH N/A
PHP remote file inclusion vulnerability in pm/lib.inc.php in pMachine Free and pMachine Pro 2.2 and 2.2.1 allows remote attackers to execute arbitrary PHP code by modifying the pm_path parameter to reference a URL on a remote web server that contains the code.
CVE-2003-1085 1 Thomson 2 Tcm Cable Modem, Tcw Cable Modem 2026-06-16 5.0 MEDIUM N/A
The HTTP server in the Thomson TWC305, TWC315, and TCW690 cable modem ST42.03.0a allows remote attackers to cause a denial of service (unstable service) via a long GET request, possibly caused by a buffer overflow.
CVE-2003-1084 1 Tildeslash 1 Monit 2026-06-16 5.0 MEDIUM N/A
Monit 1.4 to 4.1 allows remote attackers to cause a denial of service (daemon crash) via an HTTP POST request with a negative Content-Length field.
CVE-2003-1083 1 Tildeslash 1 Monit 2026-06-16 10.0 HIGH N/A
Stack-based buffer overflow in Monit 1.4 to 4.1 allows remote attackers to execute arbitrary code via a long HTTP request.
CVE-2003-1082 1 Sun 2 Solaris, Sunos 2026-06-16 7.2 HIGH N/A
Buffer overflow in utmp_update for Solaris 2.6 through 9 allows local users to gain root privileges, as identified by Sun BugID 4705891, a different vulnerability than CVE-2003-1068.
CVE-2003-1080 1 Sun 2 Solaris, Sunos 2026-06-16 1.2 LOW N/A
Unknown vulnerability in mail for Solaris 2.6 through 9 allows local users to read the email of other users.
CVE-2003-1079 1 Sun 2 Solaris, Sunos 2026-06-16 5.0 MEDIUM N/A
Unknown vulnerability in UDP RPC for Solaris 2.5.1 through 9 for SPARC, and 2.5.1 through 8 for x86, allows remote attackers to cause a denial of service (memory consumption) via certain arguments in RPC calls that cause large amounts of memory to be allocated.